Read the docs
TI-2021-00796 Aliases CVE-2021-1068GHSA-q5g9-g6pf-f7fc

Out-of-bounds read in NVIDIA SHIELD TV

Priority LOW 34CWE-125Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVDEC component, in which an attacker can read from or write to a memory location that is outside the intended boundary of the buffer, which may lead to denial of service or escalation of privileges.

Why it matters now

EPSS 0.00374 31st percentileScored 2026-11-07
Fix Fixed SHIELD TV (NVIDIA): 8.2.2

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
NVIDIASHIELD TVbefore 8.2.28.2.2Patch availableCNA
  • SHIELD TV VendorNVIDIA Affected before 8.2.2 Fixed in 8.2.2 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:nvidia:shield_experience:*:*:*:*:*:*:*:*before 8.2.2VulnerableNVIDIA
cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*9.0Running onGoogle
  • cpe:2.3:a:nvidia:shield_experience:*:*:*:*:*:*:*:* Versions before 8.2.2 Vulnerable ·NVIDIA
  • cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:* Versions 9.0 Running on ·Google

Remediation

  • Fix · CNA SHIELD TV (NVIDIA) Fixed in 8.2.2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-1068
  2. 2026-10-03 Alias added: GHSA-q5g9-g6pf-f7fc

References

Advisory 1

  • TI-2019-04046 Improper input validation in NVIDIA SHIELD TV CVSS 3.1HIGH 7.8
  • TI-2019-04045 Memory corruption in NVIDIA SHIELD TV CVSS 3.1HIGH 7.8
  • TI-2021-13438 Use after free in NVIDIA SHIELD TV CVSS 3.1HIGH 7.8
  • TI-2021-13436 Improper access control in NVIDIA SHIELD TV CVSS 3.1HIGH 7.8
  • TI-2021-00835 NVIDIA Linux kernel distributions contain a vulnerability in nvmap NVMAP_IOC_WRITE*… CVSS 3.1HIGH 7.8
  • TI-2021-00834 Out-of-bounds write in NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2… CVSS 3.1HIGH 7.8
See all 16 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences